enable a user to set a password